Vulnerabilities > CVE-2002-2219 - Unspecified vulnerability in Chetcpasswd 2.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
chetcpasswd
exploit available
NVD
Published: 2002-12-31
Updated: 2017-07-29

Summary

chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.

Vulnerable Configurations

Part Description Count
Application
Chetcpasswd
1

Exploit-Db

descriptionCHETCPASSWD 1.12 Shadow File Disclosure Vulnerability. CVE-2002-2219 . Webapps exploit for cgi platform
idEDB-ID:22111
last seen2016-02-02
modified2002-12-22
published2002-12-22
reporterVictor Pereira
sourcehttps://www.exploit-db.com/download/22111/
titleCHETCPASSWD 1.12 Shadow File Disclosure Vulnerability

References